Flexisip sending ACK signals to public address so firewalls drops it

[E2-Praveengopu]

Question

Hai,
in our configurations we want make the calls work in both private and public ip. in our setup the call gets recieved by flexisip which is listened to 5060 and the call redirects to a asterisk pbx. from there contact having public address it seems strange that after that SIP requests and responses are redirect to the public IP so firewall gets suspicious and blocks it. so good calls arent made..i didnt understand why flexisip changes it to the public address is there
any way where public calls should be handled in public network and private network so that there is no clash between public and private and call will be work fine and this is transport configurations i pt transports=sip:<public_ip>;maddr=<private_ip>

from my deep analysis i found that contact route inserter is the changing the contact from private address to public address... i think it would be good if the contact route inserter disabling in the private calls and enabling in the private calls

[E2-Praveengopu]

quick update i saw about the inter domain connections which will resolve my issue can i get the example for it. Thanks Felix in advance much helpful for me

[Failxxx]

Hello @E2-Praveengopu,
Thank you for your question.

We identified several issues on Flexisip/Proxy when dealing with both public and private networks.
We are currently working on it.
See #217

I am not sure if the [inter-domain-connections] section can help you in your situation. I think it is better to wait until identified issues are solved.

Sincerely,
Félix.

[E2-Praveengopu]

Thanks Felix... much more helpful to me

[E2-Praveengopu]

Hai, I know your teams are working so hard out there, but i need to know the issues we facing will it applicable to the domain name setup too or just it will fits the bars to only public IP. For example: transports=sip:domain.com:5060;maddr=10.10.1.111

Some knowledge will be helpful thank you

[Failxxx]

Hello @E2-Praveengopu,
We recently updated the documentation to setup a push gateway using Flexisip. Even if the push gateway feature may not be what you are looking for, it also explains how to setup transports in Flexisip so it can gracefully handle both public and private networks.
See : https://wiki.linphone.org/xwiki/wiki/public/view/Flexisip/HOWTOs/Push%20Gateway/

Sincerely,
Félix.

[E2-Praveengopu]

Hello @Failxxx ,

I am set up the push gateway using the provided documentation. According to the new documentation, I configured a Ubuntu server where Flexisip listens on port 5060 and Asterisk listens on port 5070. In this setup:

• Asterisk acts as the backend server.
• Flexisip functions as the push gateway.

Since Flexisip v2.6.0 is still in alpha, I used version 2.4.1 instead.

Initially, I configured the transports field like this:

transports=sip:X.X.X.X:5060;maddr=10.10.1.100;transport=tcp sip:10.10.1.100:5060;transport=tcp

I also added route.conf as per the documentation.

• The first domain was intended to handle SIP devices on the internet.
• The second private IP address was intended to handle SIP devices on the local network.

However, this resulted in the error: "address already used."

so i changed the transports field like
transports=sip:X.X.X.X:5060;maddr=10.10.1.100;transport=tcp sip:10.10.1.100:5061;transport=tcp

This resolved the port conflict and calls are worked in

• Internet devices can now communicate with internet devices.
• Local devices can communicate with local devices.

Problem: Internet devices cannot communicate with local devices behind NAT.

1. What is the correct way to configure the transports field in this case?
2. Is there a way to enable communication between internet devices and local devices behind NAT?
3. Do you suggest a better approach for this setup?

Sincerly,
Praveen G